ParseToOCSFProperty Struct
Processor to parse events from CloudTrail, Route53Resolver, VPCFlow, EKSAudit and AWSWAF into OCSF V1.1 format.
Example
ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_logs as logs } from 'aws-cdk-lib';
const parseToOCSFProperty: logs.ParseToOCSFProperty = {
eventSource: logs.OCSFSourceType.CLOUD_TRAIL,
ocsfVersion: logs.OCSFVersion.V1_1,
// the properties below are optional
source: 'source',
};
Properties
eventSourceOCSFSourceTypeevent_sourceOCSFSourceTypeeventSourceOCSFSourceTypeEventSourceOCSFSourceTypeEventSourceOCSFSourceTyperequired#Type of input log event source to convert to OCSF format.
ocsfVersionOCSFVersionocsf_versionOCSFVersionocsfVersionOCSFVersionOcsfVersionOCSFVersionOcsfVersionOCSFVersionrequired#Version of OCSF schema to convert to.
sourceoptionalstringsourceoptionalstrsourceoptionalStringSourceoptionalstringSourceoptional*string= '@message'#Path to the field in the log event that will be parsed.
Use dot notation to access child fields.